I'm at the point where if it requires a username and password I don't need it. Unless it's required for work or something I just don't have the mental space. I've had the same I-pod phone for almost 5 years and have zero apps

Ha, my brother is going to get me a free iphone 4, I am fixin' to move into the 21st century

Write them down and tape the list to the inside of my safe

I have a boatload of passwords...the only real way of keeping them secure is the old skool way--keep it in your head. Occasionally, I do forget a password for a site or system that rarely gets used, and in that case, I just use the forgotten password tool.

The NSA hacking your passwords is the least of your worries. Personally, I would NEVER put a password manager of any sort on the web--if something's on the web, people CAN get to it.

I use a combo of what has already been said:
Three passwords.
1. Super secure, in my case any banking/financial accounts.
2. Medium secure, Not too important but stuff I don't want anyone messing with, insurance, etc.
3. Low security, Pandora, personal email, etc.

Of course I still have a dozen or so logons so I need a document to keep track of what password goes where, that is in a nondescript word file.

But you don't do this for your daily systems- you will have a process of memory in place already. Anything else, it works.

Any new thoughts or methods in the past few years?

I have a system to remember most of them. Here is a more basic method.

Take a favorite phrase that you love, say TheQuickBrownFox. Perform some replacements. Say 0 for o, 1 for i, and # for e. You can go on and on with the replacements, but it gets complicated. It could be just a single favorite word, doesn't have to be a phrase, but pick a long and multi-syllable word.

Th#Qu1ckBr0wnF0x

Add some numbers before, after, or in the middle, that is significant to you. Say a spouse's birthday.

0101Th#Qu1ckBr0wnF0x1970

Then add something specific to the app or site. Say, TurboTax or WellsFargo.

0101Th#Qu1ckBr0wnF0x1970Turb0
W#lls0101Th#Qu1ckBr0wnF0x1970

Special Circumstances:

Some websites don't allow special characters like $, &, or %. Use capital letters to replace, say:

ThEQuick

Some websites have a maximum of 8 character passwords. Hopefully these aren't financial or government institutions, or anywhere that stores your SSN or credit card info... Just use a short word and some numbers.

If this is hard to remember, write your methodology, not the passwords themselves, in a password-protected file.

Post-it note on computer screen? :)

Still use the 'My Eyes Only' app. Neatly organized, always with me.

It is essential to my business.

http://forums.pelicanparts.com/uploa...1519330856.jpg

http://forums.pelicanparts.com/uploa...1519330856.jpg

http://forums.pelicanparts.com/uploa...1519330856.gif

http://forums.pelicanparts.com/uploa...1519330856.jpg

http://forums.pelicanparts.com/uploa...1519330856.gif

http://forums.pelicanparts.com/uploa...1519330856.jpg

It's supposed to go under the keyboard, duh! ;)

My work password has to contain at least 8 digits, a mix of large and small caps, numbers, and at least two symbols and I have to change it every six weeks.

But my ATM code that protects my life savings is 4 numbers long and I haven't changed it since Clinton was president.

(ripped off from some comedian somewhere)

KeepPass is open source (you can check the code and compile it yourself if you're really paranoid).
I don't trust anything on the password services on the web .. cause its a matter of time before they're hacked and you don't know what the administrators are doing with the code..

I prefer Lastpass to the "post-it note" option for one major reason...the post-it note doesn't help me with my phone apps, or when I'm away on vacation and need to check my bank account, or at a friends house, or whatever. Lastpass will give me the password info at all of those places and more (and, it automatically fills in the fields, so i won't mistake a 1 for a l for a I, or a o for a O for a 0 in my notes.

a small paper notebook

Finally, a voice of reason...

DashLane. The point specifically is to have a different, random password for every different login, so if one is compromised, only one is compromised. Then TouchID unlocks it on my iOS devices. Then turn on two-factor for important stuff.

I use dashlane for my non-financial accounts, but it's a pain. I can't get it to work with gmail, so I have to enter those passwords by hand. I have a encrypted folder that's shared on all my devices that has screen shots of the login info for all my financial institutions.
I finally learned to record a new password BEFORE you commit to it. Too many times have I replaced a password and forgotten to record it somewhere.

I've been using Dashlane for about a year now. One recommendation - don't forget the password for it! There is NO recovery. After using it for about a week and manually entering about 50 or more login/pwd combinations for various apps/sites - I couldn't remember the password that I told myself I'd never forget. I had to download the app again and reenter all of the info again. I've stored the Dashlane pwd in a secret place on my phone content so I won't loose it again.

Good. Definitely good. But remember your good advice is up against my good advice of writing it under the desk and pretending to drop my pen.

Ha, and the stupid girls in the office thought I was trying to look up their skirts - fools.

Roll-o-dex

If I tell ya, I gotta kill ya.

Actually I have a hidden in plain sight text file. Name it something very similar to what Windows uses for some of the numerous files in a log folder of your choosing in the Windows folder/system/32 in a folder of your choosing. If you are really paranoid, rename it to a .cnf or other file type.

To keep a copy with me on my phone I use an app I love called AirDisk Pro. It makes my iPhone into a wireless USB drive. I can make a zip file of my business files that is 600 MB, and quickly transfer it to my iPhone. I figure if the FBI can't hack an iPhone, and it should be secure. The AirDisk pro is pass key protected or you can use your thumb print. I have tons of archive data in the app, on my phone. I can access it on the phone, or download it to any computer with a WI-FI network.

To backup critical information to my phone is comforting. In event of a house fire, or some natural disaster, I will indeed have my phone with me.

I had a document on my computer with all of my passwords. I got uncomfortable having all the sensitive passwords on the computer so I password protected the document... By now you probably know the ending but yeah... I forgot the password to the password document... then I got locked out of it due to too many attempts... Yeah... don't do that.

make it longer than required
Just because it needs to be 8, that can be hard to remember. But "ThisIsThatSlowSystemForTPSReports! is both easy to remember and well out of the range for practical brute forcing.

Make it longer than required and change it somewhat regularly and I guarantee you will not need to write them down or be the weak link for attackers.

http://forums.pelicanparts.com/uploa...1519410436.jpg

This with a pencil and an eraser works well for me.

To take what "reachme" says a step further - use the first letter of each word in a shortened version of one of your favourite quotes with a numeral or 2 for variation - à la Shakespeare etc. Probably some will feel this is not a great choice - but seems to work for me.

Cheers
JB

The issue is you can't ALWAYS rely on a given system/pattern. Some sites require 8 chars or more, then some an upper alpha and also some a "special" character.

Password protected Excel file on an iCloud drive.

If a hacker can figure out what the file is and what the password to the files is, the hacker is most likely already making my life miserable.